Trojan.Starman.5307

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##2.75.125':139
'88.#72.88.7':139
'88.##2.126.63':139
'88.##2.87.69':139
'88.##2.137.81':139
'88.##2.181.96':139
'88.##2.80.38':139
'88.##2.195.169':139
'88.##2.208.213':139
'88.##2.151.16':139
'88.##2.191.47':139
'88.##2.248.229':139
'88.##2.218.82':139
'88.##2.182.251':139
'88.##2.86.102':139
'88.##2.0.236':139
'88.##2.29.65':139
'88.##2.77.22':139
'88.##2.244.248':139
'88.##2.27.94':139
'88.##2.10.13':139
'88.##2.86.102':445
'88.##2.218.82':445
'88.##2.182.251':445
'88.##2.95.125':445
'88.##2.75.118':445
'88.##2.27.94':445
'88.##2.77.22':445
'88.##2.244.248':445
'88.##2.191.47':445
'88.##2.248.229':445
'88.##2.217.18':445
'88.##2.32.152':445
'88.#72.8.92':445
'88.##2.241.79':139
'88.##2.110.23':445
'88.##2.122.76':445
'88.##2.176.68':445
'88.##2.155.67':445
'88.##2.109.151':445
'88.##2.177.199':445
'88.##2.75.118':139
'88.##2.243.168':445
'88.##2.154.47':445
'88.##2.38.66':139
'88.##2.255.108':139
'88.##2.49.115':139
'88.##2.234.148':445
'88.##2.159.38':445
'88.##2.118.220':445
'88.##2.131.150':445
'88.##2.66.83':445
'88.##2.75.154':139
'88.##2.238.47':139
'88.##2.135.5':139
'88.##2.234.148':139
'88.##2.159.38':139
'88.##2.191.93':139
'88.##2.171.117':139
'88.##2.106.78':139
'88.##2.17.43':139
'88.##2.23.52':139
'88.##2.135.5':445
'88.##2.32.152':139
'88.##2.109.151':139
'88.##2.217.18':139
'88.##2.110.23':139
'88.#72.8.92':139
'88.##2.176.68':139
'88.##2.95.125':139
'88.##2.122.76':139
'88.##2.177.199':139
'88.##2.155.67':139
'88.##2.23.52':445
'88.##2.106.78':445
'88.##2.17.43':445
'88.##2.75.154':445
'88.##2.238.47':445
'88.##2.49.115':445
'88.##2.38.66':445
'88.##2.255.108':445
'88.##2.191.93':445
'88.##2.171.117':445
'88.##2.102.226':139
'88.##2.70.42':139
'88.##2.136.216':139
'88.##2.174.207':139
'88.##2.67.104':139
'88.##2.222.164':139
'88.##2.181.34':139
'88.##2.233.189':139
'88.##2.101.146':139
'88.##2.70.178':139
'88.##2.25.204':445
'88.##2.38.90':445
'88.##2.118.186':445
'88.##2.82.165':445
'88.##2.43.249':445
'88.##2.41.57':139
'88.##2.113.187':139
'88.##2.78.248':445
'88.##2.191.86':445
'88.##2.61.28':445
'88.##2.120.205':139
'88.##2.146.216':139
'88.##2.36.233':139
'88.##2.216.73':139
'88.##2.78.152':139
'88.##2.231.246':139
'88.#72.9.46':139
'88.##2.8.231':139
'88.##2.141.241':139
'88.##2.42.80':139
'88.##2.149.42':139
'88.##2.221.152':139
'88.##2.99.120':139
'88.##2.187.123':139
'88.##2.26.120':139
'88.##2.61.12':139
'88.##2.255.165':139
'88.##2.20.84':139
'88.##2.166.189':139
'88.##2.186.134':139
'88.##2.77.165':139
'88.##2.100.23':445
'88.##2.241.79':445
'88.##2.95.182':139
'88.##2.10.13':445
'88.##2.181.96':445
'88.##2.80.38':445
'88.##2.49.229':139
'88.##2.43.219':139
'88.##2.118.140':139
'88.##2.170.37':139
'88.##2.196.222':139
'88.##2.137.81':445
'88.##2.126.63':445
'88.##2.87.69':445
'88.##2.0.236':445
'88.##2.29.65':445
'88.##2.151.16':445
'88.##2.195.169':445
'88.##2.208.213':445
'88.##2.75.125':445
'88.#72.88.7':445
'88.##2.58.44':139
'88.##2.196.222':445
'88.##2.118.140':445
'88.##2.170.37':445
'88.##2.78.248':139
'88.##2.95.182':445
'88.##2.48.58':445
'88.##2.23.48':445
'88.##2.58.44':445
'88.##2.49.229':445
'88.##2.43.219':445
'88.##2.82.165':139
'88.##2.43.249':139
'88.##2.100.23':139
'88.##2.48.58':139
'88.##2.23.48':139
'88.##2.191.86':139
'88.##2.61.28':139
'88.##2.38.90':139
'88.##2.118.186':139
'88.##2.25.204':139
'88.##2.118.220':139
'88.##2.87.166':445
'88.##2.204.52':445
'88.##2.210.42':445
'88.##2.69.14':445
'88.##2.42.202':445
'88.##2.85.12':445
'88.##2.232.45':445
'88.##2.94.174':445
'88.##2.47.139':445
'88.##2.173.240':445
'88.##2.202.181':139
'88.##2.78.254':139
'88.##2.181.137':139
'88.#72.58.3':139
'88.##2.9.139':139
'88.##2.180.23':139
'88.##2.202.68':445
'88.##2.136.2':139
'88.##2.179.25':139
'88.##2.228.41':139
'88.##2.156.66':445
'88.##2.252.9':445
'88.##2.124.220':445
'88.#72.9.98':445
'88.##2.205.32':445
'88.##2.97.205':445
'88.##2.171.174':445
'88.##2.123.82':445
'88.##2.1.118':445
'88.##2.116.71':445
'88.##2.139.97':445
'88.##2.178.221':445
'88.##2.26.179':445
'88.##2.86.190':445
'88.##2.74.228':445
'88.##2.244.235':445
'88.##2.38.17':445
'88.##2.219.108':445
'88.##2.12.28':445
'88.##2.58.234':445
'88.##2.45.176':445
'88.##2.102.2':139
'88.##2.244.235':139
'88.##2.86.190':139
'88.##2.74.228':139
'88.##2.232.45':139
'88.##2.156.66':139
'88.##2.45.176':139
'88.##2.12.28':139
'88.##2.58.234':139
'88.##2.178.221':139
'88.##2.26.179':139
'88.##2.210.42':139
'88.##2.87.166':139
'88.##2.42.202':139
'88.##2.69.14':139
'88.##2.202.68':139
'88.##2.94.174':139
'88.##2.85.12':139
'88.##2.173.240':139
'88.##2.204.52':139
'88.##2.47.139':139
'88.##2.38.17':139
'88.##2.218.145':139
'88.##2.135.133':139
'88.##2.126.177':139
'88.##2.123.82':139
'88.##2.135.110':139
'88.##2.240.59':139
'88.##2.12.133':139
'88.##2.117.160':139
'88.##2.106.166':139
'88.##2.225.226':139
'88.#72.9.98':139
'88.##2.252.9':139
'88.##2.97.205':139
'88.##2.219.108':139
'88.##2.205.32':139
'88.##2.1.118':139
'88.##2.171.174':139
'88.##2.139.97':139
'88.##2.124.220':139
'88.##2.116.71':139
'88.##2.110.229':139
'88.##2.21.179':445
'88.##2.181.60':139
'88.##2.226.127':139
'88.##2.185.248':139
'88.##2.87.191':445
'88.##2.186.30':445
'88.##2.55.215':445
'88.##2.238.134':445
'88.##2.227.100':445
'88.##2.92.32':139
'88.##2.38.92':139
'88.##2.31.202':139
'88.##2.80.60':139
'88.##2.182.127':139
'88.##2.226.141':139
'88.##2.164.114':139
'88.##2.190.190':139
'88.##2.109.26':139
'88.##2.192.218':139
'88.##2.199.37':445
'88.##2.185.248':445
'88.##2.181.60':445
'88.##2.226.127':445
'88.##2.226.141':445
'88.##2.164.114':445
'88.##2.131.150':139
'88.##2.66.83':139
'88.##2.154.47':139
'88.##2.110.229':445
'88.##2.243.168':139
'88.##2.182.127':445
'88.##2.31.202':445
'88.##2.80.60':445
'88.##2.236.121':445
'88.##2.241.235':445
'88.##2.192.218':445
'88.##2.190.190':445
'88.##2.109.26':445
'88.##2.92.32':445
'88.##2.38.92':445
'88.##2.241.235':139
'88.##2.202.181':445
'88.##2.78.254':445
'88.##2.181.137':445
'88.#72.58.3':445
'88.##2.9.139':445
'88.##2.180.23':445
'88.##2.69.14':9988
'88.##2.136.2':445
'88.##2.179.25':445
'88.##2.228.41':445
'88.##2.135.133':445
'88.##2.106.166':445
'88.##2.218.145':445
'88.##2.135.110':445
'88.##2.126.177':445
'88.##2.12.133':445
'88.##2.102.2':445
'88.##2.240.59':445
'88.##2.225.226':445
'88.##2.117.160':445
'88.##2.87.166':9988
'88.##2.238.134':139
'88.##2.227.100':139
'88.##2.21.179':139
'88.##2.135.110':9988
'88.##2.126.177':9988
'88.##2.199.37':139
'88.##2.236.121':139
'88.##2.186.30':139
'88.##2.55.215':139
'88.##2.87.191':139
'88.##2.74.228':9988
'88.##2.244.235':9988
'88.##2.156.66':9988
'88.##2.204.52':9988
'88.##2.232.45':9988
'88.##2.123.82':9988
'88.##2.171.174':9988
'88.##2.116.71':9988
'88.##2.86.190':9988
'88.##2.219.108':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней